The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root user creates a kernel process, which allows attackers to cause a denial of service (oops and device reboot) via unspecified vectors.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102752-1 | patch vendor advisory broken link |
http://www.securityfocus.com/bid/24036 | patch third party advisory vdb entry |
http://osvdb.org/39117 | vdb entry broken link |
https://exchange.xforce.ibmcloud.com/vulnerabilities/34495 | third party advisory vdb entry |